PT-2021-5313 · Fuji Electric · Tellus Lite V-Simulator+1

Kimiya + 1 · Published 2021-10-26 · Updated 2021-12-27 · CVE-2021-38401

Positive Technologies (AI Summary)

CVSS v3.1

7.8

High

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Fuji Electric V-Server Lite and Tellus Lite V-Simulator versions prior to 4.0.12.0

Description The issue is related to an untrusted pointer dereference, which may allow an attacker to execute arbitrary code and cause the application to crash.

Recommendations For Fuji Electric V-Server Lite and Tellus Lite V-Simulator versions prior to 4.0.12.0, update to version 4.0.12.0 or later to resolve the issue.

Fix

Untrusted Pointer Dereference

Weakness Enumeration

CWE-822

Related Identifiers

BDU:2021-06139

CVE-2021-38401

Affected Products

Fuji Electric V-Server Lite

Tellus Lite V-Simulator

References · 7

• https://nvd.nist.gov/vuln/detail/CVE-2021-38401 · Security Note
• https://osv.dev/vulnerability/CVE-2021-38401 · Vendor Advisory
• https://cisa.gov/uscert/ics/advisories/icsa-21-299-01 · Patch
• https://bdu.fstec.ru/vul/2021-06139 · Security Note
• https://cybersecurity-help.cz/vdb/SB2021102702 · Note
• https://us-cert.cisa.gov/ics/advisories/icsa-21-299-01 · Note
• https://t.me/cvenotify/24676 · Telegram Post